Skip to main content
Proposed by the European Commission, COM(2025) 838

The European
Business Wallet

A Business Wallet is a digital identity wallet for an organisation, not a person. COM(2025) 838 would establish a European Business Wallet.

It would give every company, institution and public body in the EU one legally recognised way to prove who it is, who may act on its behalf and which credentials it holds: across borders, in seconds, without sending another scanned PDF.

Illustration of how a business wallet could look on a laptop, holding company credentials
Aligned with European standards and initiatives
eIDAS 2.0
European Digital Identity
OpenID Foundation
Why it exists

What a Business Wallet enables

Organisations need more than a digital identity. They need a trusted way to identify themselves, prove who they are and what they can do, represent their organisation, and act securely on that basis. A Business Wallet brings these capabilities together — from establishing organisational identity to sharing trusted credentials, managing representation and authorisations, and enabling trusted transactions.

See the full comparison
Identify

Who is the organisation?

Identity · Registration · Business details

An organisation would establish and share its verified identity, so a counterparty could check its legal identity, registration and business details against the source instead of taking a document on trust.

Prove

What can the organisation prove about itself?

Credentials · Certificates · Licences · Attributes

It would hold what it has been issued and prove facts about itself with trusted digital credentials, certificates, licences and other verifiable attributes.

Represent

Who can act on its behalf?

Mandates · Authorisations · Roles · Representation

It would show who is authorised to act on its behalf, for which purpose and within which scope, connecting people, organisations and authority.

Transact

How can it act with trust?

Sign · Seal · Send · Verify

It would exchange trusted information with other organisations and public authorities, sign and seal transactions, and verify who it is dealing with and what they are authorised to do.

Governance

Who governs the European Business Wallet?

The European Business Wallet is not governed by a single wallet provider. It sits inside a European legal and regulatory framework, with responsibilities shared across several actors.

European Union

Sets the legal framework and the common requirements every Business Wallet must meet.

European Commission

Develops the implementing acts and technical specifications that turn the regulation into detailed requirements.

Member States

Implement the framework nationally and designate the competent authorities responsible for supervision.

Authoritative sources

Business registers, tax authorities and other bodies that provide the trusted source information credentials are built on.

Qualified Trust Service Providers

Issue qualified trust services and electronic attestations that carry legal weight under eIDAS.

Wallet providers

Build and operate Business Wallet solutions that meet the common European requirements.

Businesses

Manage and use their own organisational credentials, mandates and authorisations.

Relying parties

Request and verify the trusted business information a wallet presents.

Standards organisations

Develop the open, interoperable technical standards the framework relies on.

For your organisation

What the proposal would mean for you

The obligations and options in COM(2025) 838 land differently depending on what kind of organisation reads it.

Businesses and SMEs

What would stay optional, what a Wallet could be used for, and the cost estimates the Commission has published.

Read more about Businesses and SMEs

Public administrations

The acceptance obligations the proposal would place on public sector bodies, and by when.

Read more about Public administrations

Banks and regulated sectors

What a Business Wallet could prove about a corporate counterparty, and why accepting one would stay a commercial choice.

Read more about Banks and regulated sectors
Three pillars

Issuer, holder, verifier: three roles, one organisation

Under the EUDI Wallet, a person is mostly a holder. Under the proposal, an organisation would be able to take on all three roles, sometimes at once, each checked against the same EU trust lists.

Issuer

The organisation would issue verifiable credentials of its own, signed statements a counterparty can check without calling back: the same role chambers of commerce, tax authorities and regulators already play toward it.

Holder

Credentials issued to the organisation, registration data, legal status, authorisations, certificates, would live in its Business Wallet. The organisation itself is the holder, not an employee and not a platform.

Verifier

When a counterparty presents a credential, the organisation would check its signature, issuer status and validity directly against EU trust lists: instantly, and without contacting the issuer.

EU TRUST LISTSIssuerchamber, tax authority, regulatorHolderthe organisation, via its Business WalletVerifierthe counterparty checking a credential
Use cases

Built for every business interaction

From compliance and procurement to supply chains and permits: wherever an organisation has to prove something about itself.

Compliance and legal filings

Registration extracts, tax standing, licences and annual statements shared as credentials with a verifiable issuer.

Public procurement

Submit an ESPD once and reuse it. Contracting authorities verify eligibility without requesting the same evidence twice.

KYC and due diligence

Onboard a counterparty in minutes: legal status, ownership, mandates and signatories checked at source.

Supply chain and product data

Certificates of origin, conformity and sustainability travelling with the goods instead of in an inbox.

Access, permits and licences

Request, hold and present permits and access rights digitally: on site, at the gate, or in a portal.

E-invoicing and e-delivery

Sealed invoices and legally reliable delivery of documents, with evidence of who sent what, and when.

How it works

From issued credentials to trusted interactions

Five moves would take an organisation from a paper trail to a verifiable one. Scroll to follow them.

1

Issuers issue

Chambers of commerce, tax authorities, regulators and certification bodies issue verifiable credentials about the organisation: signed at source, checkable forever.

2

The organisation holds

They land in the Business Wallet: registration data, legal status, authorisations, certificates. The organisation is the holder, not an employee, not a platform.

3

People are authorised

Mandates issued from the Business Wallet land in each representative's personal EUDI Wallet, proving who may act, and within which limits.

4

Only what is asked for

When a counterparty asks a question, the wallet answers exactly that question. Selective disclosure keeps everything else private.

5

The relying party verifies

Signatures, issuer status and validity are checked against EU trust lists: instantly, without calling anyone, and without a bilateral integration.

Issuerstrusted at sourceChamber of commerceTax authorityRegulators & auditorsBusiness Walletthe organisationRegistration dataAuthorisationsCertificatesEUDI WalletrepresentativesPerson identityMandate to actLimits & validityRelying partybank, buyer, authorityVerifies signaturesChecks trust listsGrants access134verified

Under the Commission's proposal the Business Wallet would be issued to legal persons, while the EUDI Wallet stays with natural persons. The two are designed to work together.

Wallets

A growing ecosystem of business wallets

Providers across Europe are building wallets for organisations. These are listed in the FIDES ecosystem explorer.

View all wallets
SPAIN

Gataca Studio

Gataca Studio is a cloud-based digital identity platform enabling organizations to interact with ID wallets.

Learn more about Gataca Studio
SPAIN

Identfy Business Wallet

Identfy Business Wallet is an enterprise-grade organizational identity solution designed for managing, issuing and presenting corporate verifiable credentials in B2B and...

Learn more about Identfy Business Wallet
INDIA

Inji Verifier

An open-source verification component by MOSIP enabling organizations and relying parties to verify verifiable credentials using OpenID4VP.

Learn more about Inji Verifier
NETHERLANDS

Sphereon VDX platform

Sphereon VDX is a verifiable data layer for policy-driven trust and audit-ready decisions.

Learn more about Sphereon VDX platform
FAQ

Questions worth asking

Short answers here. Every term links through to a fuller definition in the glossary.

Open the glossary
A digital identity wallet for a legal person, a company, association or public body, rather than for an individual. It would store credentials the organisation has been issued (registration, legal status, authorisations, certificates), present them selectively to counterparties, and seal and sign on the organisation’s behalf. The European Commission proposed it on 19 November 2025 as a dedicated instrument alongside the EUDI Wallet.
eIDAS 2 is Regulation (EU) 2024/1183, in force since 20 May 2024, which amended the original eIDAS Regulation and established the European Digital Identity Framework. It sets the trust framework the Business Wallet builds on: qualified trust services, trusted lists, and the specifications that make wallets interoperable across the Union.
No business is obliged to hold a wallet. The obligations fall on others: Member States must make at least one EUDI Wallet available to citizens and residents, and relying parties in regulated sectors, banking, telecoms, energy, transport, health, must accept it. The Business Wallet proposal is still moving through the ordinary legislative procedure, and the Parliament and the Council can still change it. No date is settled until the final text is adopted.
The EUDI Wallet is the personal wallet: it carries a natural person's identity data and attributes. The Business Wallet would carry the organisation's. The Commission's proposal deliberately separates the two, amending eIDAS so mandatory issuance of the EUDI Wallet relates to natural persons only. In practice they would interlock: a representative's EUDI Wallet holds the mandate that proves they may act for the organisation whose credentials sit in the Business Wallet.
A Qualified Electronic Registered Delivery Service is a trust service under eIDAS that transmits data between parties and produces evidence of sending, receipt and integrity, with a qualified timestamp. It is the registered post of the digital single market, and the mechanism by which a document sent to or from a wallet becomes legally reliable, not merely transmitted.
Start with an inventory: which documents does your organisation ask others for, and which does it have to produce itself? Those are your first credentials. Then identify the processes where you act as a relying party, follow the Architecture and Reference Framework, and pilot with a wallet provider or in one of the large-scale pilots. Organisations that map their authorisations and mandates now will be the ones ready to switch them on.
The Commission has cited two figures: up to €150 billion a year in its press release, and at least €160 billion a year on its policy page. Both are estimates of a modelled outcome under assumed uptake, not a guaranteed result. See the savings estimates explained for both figures, their assumptions, and why the primary sources do not reconcile them.
A trust service provider is not certified once and left alone. Under eIDAS, a service becomes qualified, the status it needs to be recognised across the Union, by passing an assessment from an accredited conformity assessment body and then being added to the supervising Member State’s trusted list: the register a relying party checks before trusting a signature, seal or timestamp. Each Member State designates a supervisory body that can audit a qualified provider at any time and withdraw its status. It is this chain of audit, trusted list and supervision, not a private certificate, that would let a business wallet’s seals and credentials be trusted anywhere in the Union.